Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\utwiehei.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 3531134490
- %TEMP%\abram.dat
- %TEMP%\nsv9fd2.tmp\system.dll
- %TEMP%\registrars.dll
- %APPDATA%\microsoft\windows\utwiehei\brrugtht.exe
- %APPDATA%\microsoft\windows\utwiehei\brrugtht.exe
- %TEMP%\abram.dat
- %TEMP%\abram.dat
- http://www.ms###csi.com/ncsi.txt
- DNS ASK me###info.xyz